ATT&CK-MAPPED COVERAGE
Validated control coverage
91% OVERALLINITIAL ACCESS
82%
EXECUTION
94%
PERSISTENCE
76%
PRIVILEGE ESC.
88%
DEFENCE EVASION
71%
CREDENTIAL ACCESS
85%
LAST VALIDATED 00:17 IST20 SAFE SCENARIOS / 6 TACTICS
ORB COMMAND / OPERATIONAL OVERVIEW
Good evening, Administrator.
Demonstration data until NEST or ORB Local, issued by Kaynos, is running on this host. Connect a verified Command backend before treating this as a control plane.
ORB CONTROL WATCH
IDLE / 00Ready for an interface demonstration
This control runs a bounded UI demonstration; no endpoint command is issued.
ORGANISATION RESILIENCE91/100↑ 4 THIS PERIOD
WORKING CONTROLS82/8497.6% reporting normally
SIEM / NDR126119 passed / 7 require review
KEYS LOADEDDEMOsample acknowledgement
OPEN HIGH RISK2Action required now
SECURITY CHAIN
Control path integrity
2 GAPSIDENTIFY126 TESTS
→HEALTH124 SEEN
→GAPS2 MISSED
→LOCALNO VM
EVIDENCE LEDGERCHAIN VERIFIED
HEAD 9F24…A71CPRIORITY QUEUE / DEMONSTRATION
Fix these first
03 ACTIVERISKCONTROL / FINDINGASSETOWNERAGE
HIGH
VAL-WIN-006
OPS-WS-117SOC ENGINEERINGPowerShell telemetry not reaching SIEM
HIGH
VAL-LNX-003
ERP-LNX-02LINUX PLATFORMAudit policy drift on privileged server
MED
VAL-NDR-002
NDR-SENSOR-1NETWORK SECURITYSuricata signature revision behind baseline
FLEET / DEMONSTRATION
Recently reporting identities
VIEWING 5 / 84ENDPOINTGROUPPLATFORMSTATETRUSTSEEN
FIN-WS-021FINANCEWINDOWS 11ONLINEA
SOC-LNX-004SOCUBUNTU 24.04ONLINEA
OPS-WS-117OPERATIONSWINDOWS 10DEGRADEDC
WAZUH-MGR-01SECURITYRHEL 9ONLINEA
HR-WS-042CORPORATEWINDOWS 11ONLINEB
EVIDENCE ACTIVITY
Planned operational record
NOT BACKEND-ATTESTEDVALIDATION
PowerShell telemetry test completed
FIN-WS-021INGEST
Suricata event acknowledged by Wazuh
NDR-SENSOR-1IDENTITY
Endpoint certificate rotated
SOC-LNX-004POLICY
Signed policy revision 0012 activated
84 ENDPOINTSCONTROL-PLANE CONFIGURATION
Backend connection gates
NOT CONNECTEDNESTNOT DETECTED
NEST is issued by Kaynos after a written request. No public installer is published on this site. No virtual machine.
ORB LOCALNOT DETECTED
ORB Local is issued by Kaynos after a written request. No public installer is published on this site.
INTEGRATIONSREQUIRES VERIFIED CONNECTORS
Wazuh and Suricata values shown above are demonstration records until the local observer is running.
ADMINISTRATIONNO REMOTE SHELL
User, role and certificate administration remain disabled. This console does not command endpoints.